Check ID: appinsights_ensure_is_configured
Provider: Azure
Service: appinsights
Severity: LOW
Categories: logging
Resource type: microsoft.insights/components

What this check verifies

Azure subscription contains at least one Application Insights resource collecting application telemetry (metrics, traces, logs) for monitored workloads. The check determines whether telemetry collection exists at the subscription level, indicating that application monitoring is configured.

Risk

If Application Insights is missing, applications run with reduced observability, limiting detection of anomalies and attacks. This undermines integrity and accountability (fewer traces), degrades availability by slowing troubleshooting, and increases exposure to undetected data exfiltration or injection at the app layer.

Recommendation

Deploy Application Insights for all critical workloads and centralize data in a Log Analytics workspace. Configure actionable alerts and dashboards, enforce least privilege on telemetry, and set retention/export policies. Use private connectivity and appropriate sampling, and integrate with SIEM for defense in depth.

Remediation

az monitor app-insights component create —app <APP_NAME> —resource-group <RESOURCE_GROUP> —location <LOCATION> —application-type web —subscription <SUBSCRIPTION_ID>

References

Where this check fires

This check runs on every scheduled scan against your Azure account. Findings appear at Cloud Security → Findings filterable by Check ID = appinsights_ensure_is_configured. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to Azure checks